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Sin 

This is an Appeal Brief in connection with the derisions of the Examiner in a Final Office 
Action mailed August 3 1 , 2007, and in connection with the Notice of Appeal mailed November 
30,2007. 

This Appeal Brief is also in response to the Notice of Non-Compliance mailed February 
1 3» 2008 indicating that the Status of Claims incorrectly indicated claim 19 as being independent 
Clearly, "19" was a typographical error and should have been claim 10 instead, and the 
arguments and sections that follow address independent claim 1 0. The Status of the Claims 
section herein has been revised to include claim 1 0 instead of claim 19 as being independent. 
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It is respectfully submitted that the priasent application has been more than twice rgected 
Each of the topics required in an Appeal Brief and a Table of Contents arc presented herewith 
and labeled appropriately. 
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(1) Heal Party in Interest 

The real party in interest is Hewlett-Packard Development Company, L J\ 

(2) Related Appeals and Interferences 

The Appellant is unaware of any appeals or interferences related to this case. 

(3) Status of Claims 

Claims 1-13 arc pending of which claims 1 7 4, 5, 10 and 11 are independent All the 
pending claims 1-1 3 are rejected and are hereby appealed. 

(4) Status of Amendments 

No amendment was filed subsequent to the Final Office Action dated August 31, 2007. 

(5) Summary of Claimed Subject Matter 

Claim 1 . A computer-implemented method for managing respective sessions between mobile 
communication devices (FIG. 1, 1 02; p.4, L 7-14) and an application program (FIG. 1, 106; p.4, 
1. 15-19) hosted on a data processing system with a gateway module (FIG* 1, 110; p. 4, L 20-27) 
that is coupled to the mobile communications devices and to the application program, 
comprising: 



S 
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generating at the gateway module respective first session identifiers upon receipt of initial 
requests from the mobile communication devices at the gateway module (FTG. 1 , 1 04, 108; p.5,1. 
1-8; FIG, 2,202; p.6, 1 .6-8) and transmitting the first session identifiers to the application 
program (FIG. 1, 104 y 106, p,5,l. 1-8; FIG, 2,212; p. 6, L 1 6-17); 

associating the first session identifiers with corresponding second session identifiers from 
the application program at the gateway module, wherein respective connections arc established 
between the mobile communications devices and the application program (FIG, 2, 208, 214; p. 6, 
1. 14-19) and 

in response to subsequent communications from the mobile devices to the application 
program while the respective connections between the mobile devices to the application program 
arc established and for communications within the respective sessions, transmitting from the 
gateway module to the application program the second session identifiers that arc associated with 
the first session identifiers of the mobile devices of the subsequent communications (FIG. 2, 216; 
p. 6, 1. 19-22). 

4* An apparatus for managing respective sessions between mobile communication devices (FIG. 
1, 102; p.4, L 7-14) and an application program (FIG. 1 , 106; p.4, 1. 1 5-1 9) hosted on a data 
processing system, comprising: 

means for generating respective first session identifiers upon receipt of initial requests 
from the mobile communication devices (FIG. 1, 1 04, 1 08; p.4, 1. 20-27; p. 5, L 1-8; FIG. 2, 202; 

6 
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p. 6,-L 6-8) and transmitting the first session identifiers to the application program (FIG. 1 , 1 04, 
1 06; p.4, L 15-17, L 22-24; p. 5, I. 1-8; FTG* 2, 212; p. 6, L 16-17); 

means for associating the first session identifiers with corresponding second session 
identifiers from the application program (FIG, 1,110; p.4, L 20-27; p. 5, L 8-9; FIG, 2, 208, 21 4; 
p. 6, L 14-19; FIG- 2, 208,214; p. 6, T. 14-19), wherein respective connections are established 
between the mobile communications devices and the application program and 

means for transmitting the second session identifiers that arc associated with the first 
session identifiers of the mobile devices to the application program in response to and in 
association with subsequent communications from the mobile devices directed to the application 
program while the respective connections between the mobile devices to the application program 
are established and for communications within the respective sessions (FIG. 1 , 1 04, 1 06; p.4, L 
15-17, L 22-24; FTG. 2, 21 6; p. 6, L 19-22). 

5. A computer-implemented method for managing respective shopping sessions between 
wireless communication devices (FIG. 1, 102; p.4, L 7-14)and a merchant application (FIG. 1, 
1 06; p.4, L 15-19) with a gateway module (FIG. 1 , 1 10; p. 4, 1. 20-27) that is coupled to the 
mobile communi cations devices and to the merchant application, comprising: 

generating at the gateway module respective wireless session identifiers upon receipt of 
initial requests from the wireless communication devices at the gateway module FIG. 1, 104, 
108; p. 5, 1. 1 -8; FIG. 2, 202; p. 6, 1. 6-8) and transmitting the wireless session identifiers to the 
merchant application (FIG. 1, 104, 106, p. 5, L 1-8; FIG. 2, 212; p. 6, 1. 16-17); 

7 
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generating at the merchant application respective merchant session identifiers for the 
wireless session identifiers (FIG. 3, 306; p. 7, L 10-12) and transmitting the merchant session 
identifiers to the gateway module (FIG. 3,310; p. 7, L 1 6-19); 

associating the wireless session identifiers with corresponding merchant session 
identifiers at the gateway module, wherein respective connections arc established between the 
mobile communications devices and the merchant application (FIG- 2, 208, 214; p, 6, 1, 14-19) 
and 

in response to subsequent communications from the mobile devices to the merchant 
application while the respective connections between the mobile devices to the merchant 
application are established and for communications within the respective sessions, transmitting 
from the gateway module to the merchant application the merchant session identifiers that are 
associated with the wireless session identifiers of the mobile devices of the subsequent 
communications (FIG. 2, 21 6; p. 6, L 1 9-22). 

6. The method of claim 5, further comprising: 

receiving checkout requests from the wireless communication devices at the gateway 
module and transferring the checkout requests to a wallet module that manages user 
authentication (step 352, FTG. 4); 

when a user at a wireless communications device has logged-in to the wallet module, 
transmitting payment options from the wallet module to the wireless communications device in 
response to a checkout request from the wireless communications device (step 360, FIG. 4); and 

8 
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when a user at a wireless communications device has not logged-in to the wallet module* 
transmitting a log-in prompt from the wallet module to the wireless communications device in 
response to a checkout request from the wireless communications device (Step 356, FIG. 4), 

7. The method of claim 6, further comprising generating at the wallet module respective wallet 
session identifiers for the wireless session identifiers and associating the wallet session 
identifiers with corresponding wireless session identifiers in a wallet session identifier table 
(steps 358, 354 FIG, 4). 

8. The method of claim 7, further comprising, in response to a payment request from a wireless 
communications device, transmitting the payment request from the gateway module to the 
merchant application, disassociating the wireless session identifier from the corresponding 
merchant session identifier, and generating a new wireless session identifier for the wireless 
communications device when another initial request is received from the wireless 
communications device (steps 228, 230 and 202 FIG 2). 

9* The method of claim 8, further comprising clearing inactive entries from the wallet session 
identifier table, (step 362, FIG. 4) 



9 
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1 0. An apparatus for managing respective shopping sessions between wireless communication 
devices (FIG, 1, 102;p.4, 1. 7-14) and a merchant application (FIG. l t 106;p.4, L 15-19) f 
comprising: 

means for generating respective wireless session identifiers upon receipt of initial 
requests from the wireless communication devices (FIG, 1, 104, 1 08; p.4, 1 20-27; p. 5, 1, 1-8; 
FTG. 2, 202; p.6 7 L 6-8) and transmitting the wireless session identifiers to the merchant 
application (FIG.1, 104, 1 06; p.4, T. 1.5-17, L22-24; p.S, L 1-8; FIG. 2,212; p.6,1 . 16-17); 

means for associating the wireless session identifiers with corresponding merchant 
session identifiers received from the merchant application, wherein respective connections arc 
established between the mobile communications devices and the merchant application (FIG. 1, 
1 10; p. 4, 1. 20-27; p. 5, I. 8-9; FIG. 2, 208, 214; p. 6, L 14-19; FIG. 2, 208, 214; p. 6, L 14-19); 
and 

means for transmitting the merchant session identifiers that arc associated with the 
wireless session identifiers of the wireless devices to the merchant application in response to and 
in association with subsequent communications from the wireless devices directed to the 
merchant application while the respective connections between the mobile devices to the 
merchant application arc established and for communications within the respective sessions 
(FIG. 1, 104, 106; p.4, 1. 15-17, 1. 22-24; FIG. 2, 216; p. 6, L 19-22). 
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1 h A system for managing respective sessions between mobile communication devices (FIG. 1 , 
102; p. 4, L 7-14) and an application program hosted on a data processing system (FIG. 1 » 1 06; 
p.4, 1. 1 5-1 9), comprising: 

a mobile interface (FIG, 1, 108; p. 4, 1. 24-27) configured and arranged to connect with a 
plurality of mobile communication devices; 

a gateway (FIG. 1 , 104; p. 4, L 20-27) coupled to the mobile interface and to the 
application program, the gateway configured to generate respective first session identifiers upon 
receipt of initial requests from the mobile communication devices (FIG. 1, 1 04, 1 08; p. 4, T. 20- 
27; p. 5, T. 1-8; FIG. 2, 202; p. 6, 1. 6-8), associate the first session identifiers with corresponding 
second session identifiers received from the application program, wherein respective connections 
arc established between the mobile communications devices and the application program (FIG. 
1,110; p.4, 1 .20-27; p. 5, 1.8-9; FIG. 2,208,214; p.6, L 14-19; FIG, 2, 208, 214; p. 6, 1. 14-19), 
and transmit the second session identifiers that are associated with the first session identifiers to 
the application program in response to and associated with subsequent communications from the 
mobile devices to the application program while the respective connections between the mobile 
devices to the application program are established and for communications within the respective 
sessions (FIG. 1 , 1 04, 1 06; p.4, 1. 1 5-17, L 22-24; FIG. 2,216; p. 6, h 19-22). 
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(6) Grounds of Rejection to be Reviewed on Appeal 

A. Claims 1-3, 4 and 1 1 -1 3 rejected under 35 U.S.C. §1 02(e) as being anticipated by 
Aziz ct al.„ 6,643,701 (referred to as Aziz). 

B. Claims 5 and 10 rejected under 35 U.S.C, §1 03(a) as being unpatentable over 
Aziz in view of Davis ct aL, 6,367,009 (referred to as Davis). 

C, Claims 6-9 rejected under 35 U.S.C- §1 03(a) as being unpatentable over Aziz in 
view of Davis in further view of Spades ct aL, 6,1 67,382, (referred to as Sparks). 

D, Claims 1-13 rejected under 35 U.S.C. §103(a) as being unpatentable over Nguyen 
et al, 5 5,93 1 ,917, (referred to as Nguyen) in view of Davis* 



12 
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(7) Arguments 

A. Therejection of claims l-3„_4_ and 1 1-13_under 35 U.S.C 5102(e) as being anticipated 
bYAzizshould be reversed because Aziz fails to teach all the features of independent claims 
1,4 and tl. 

The test for determining if a reference anticipates a claim, for purposes of a 

rejection under 35 U.S.C. § 102, is whether the reference discloses all the elements of the 

claimed combination, or the mechanical equivalents thereof functioning in substantially the same 

way to produce substantially the same results. As noted by the Court of Appeals for the Federal 

Circuit in Lindemann Maschincnfabrick GmbH v, American Hoist ami Derrick Co,, 221 USPQ 

481, 485 (Fed Cin 1984), in evaluating the sufficiency of an anticipation rejection under 35 

U-S.C § 102, the Court stated: 

Anticipation requires the presence in a single prior art reference 
disclosure of each and every element of the claimed invention, 
arranged as in the claim. 

Therefore, if the cited reference does not disclose each and every clement of the claimed 
invention, then the cited reference fails to anticipate the claimed invention and> thus, the claimed 
invention is distinguishable over the cited reference. 

The rejection of claims 1 , 3, 4 and 11-13 under 35 U.S.C- §1 02(e) is clearly improper 
because Aziz foils to teach all the features of independent claims 1 , 4 and 1 1 . 

Claim 1 recites, 

generating at the gateway module respective first session identifiers upon 
receipt of initial requests from the mobile communication devices at the gateway 
module and transmitting the first session identifiers to the application program; 

13 
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associating the first session identifiers with corresponding second session 
identifiers from the application program at the gateway module, wherein 
respective connections are established between the mobile communications 
devices and the application program; and 

in response to each subsequent communication from each mobile device 
to the application program via the connection between the mobile device and the 
application program while the connection is established, transmitting from the 
gateway module to the application program the second session identifier that is 
associated with die first session identifier of the mobile device of the subsequent 
communication. 



These features from claim 1 set forth that the gateway module generates respective first 
session identifiers upon receipt of initial requests from the mobile communication devices at the 
gateway module and transmits the first session identifiers to the application program. And in 
response to each subsequent communication from each mobile device to die application program 
via the connection between the mobile device and the application program while the connection 
is established, the method transmits from the gateway module to the application program the 
second session identifier that is associated with the first session identifier of die mobile device of 
the subsequent communication. That is, the second session identifier, which the application 
provided to the gateway, is transmitted back to the application from the gateway for the 
subsequent communications. 

The Final Office Action dated September 6, 2007, relics on the paper entitled, "The SSL 

Protocol**, Version 3.0, by Kocher ct al. (referred to as Kocher) in interpreting the teachings of 

Aziz. Neither Aziz nor Kocher teaches or suggests the following features of claim 1, 

in response to each subsequent communication from each mobile device to 
the application program via the connection between the mobile device and the 
application program while the connection is established, transmitting from the 

14 
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gateway module to the application program the second session identi fier that is 
associated with the first session identifier of the mobile device of the subsequent 
communication* 

That is neither Aziz nor Kochcr teaches or suggests the second session identifier, which 
the application provided to the gateway, is transmitted back to the application from the gateway 
for the subsequent communications. 

Aziz discloses using an SSL handshaking session at step 920 to create a secure link 
between the relay and the server. See column 8, lines 1 6-24* After the handshaking session 
between the Telay and the server is completed and after the secure link between the relay and the 
server is established* the client and the relay establish a secure connection between each other 
Sec column 8, lines 42A5. 

The rejection alleges the first and second identifiers ore taught by the "hello messages" 
disclosed in Kochcr on pages 20-21 used to create the SSL secure connections of Aziz. Kocher 
discloses the hello messages arc used when a client first connects to a server or to renegotiate 
security parameters, Kocher further discloses on pages 1 8-19 that the transmission of session 
identifiers is apparently for resuming a previous session or duplicating an existing session. Thus, 
the client docs not send a hello message for each subsequent communication between the client 
and the server. Hence, once the two different secure connections arc established between the 
client and the relay and between the relay and the server, respectively* hello messages arc not 
exchanged for each subsequent communication from the client Thus, Aziz fails to teach in 
response to each subsequent communication from each mobile device to the application 

15 



PAGE 16/31 * RCVD AT 2/28/2008 3:44:38 PM [Eastern Standard Time) * SVR:USPT0-EFXRH/18 * DNIS:2738300 ' CSID:7038655150 * DURATION (mm-ss):07-26 



F"EB-E8-S008'(THU) 16:07 MRNNRVR & KflNG 



(FflX)7038655150 



P. 017/031 



PATENT Atty Docket No,; 10007291-1 

App. Scr. No.: 09/852,360 

program, white the connection is established, transmitting from the gateway module to the 
application program the second session identifier. 

Furthermore, Afcifc discloses two different secure connections are established between the 
client and the relay and between the relay and the server, respectively* Thus, hello messages or 
session identifiers for the first secure connection and the second secure connection are not 
associated in Aziz. Hence, Aziz fails to teach, "associating the first session identifiers with 
corresponding second session identifiers from the application program at the gateway module," 
as recited in claim 1. 

Independent claims 4 and 1 1 include similar features and are not shown to be anticipated 
for at least the reasons set forth above. 

B. The rejection of claims S and 1 0 under 35 U.S»C. S103 fa) as being unpatentable over 

Asia: _in view_of_DaYis should be reversed because A^iz in yicrty_of_Dayis fails to teach or 

suggest all the features of independent claims 5_and_1 0. 

The test for determining if a claim is rendered obvious by one or more references for 

purposes of a rejection under 3S U.S.C- § 103 is set forth in KSR International Co. v. Tele/lex 

Inc., 550 US^ 82 USPQ2d 1385 (2007): 

"Under §103 T the scope and content of the prior art are to be determined; 
differences between the prior art and the claims at issue are to be ascertained; and 
the level of ordinary skill tn the pertinent art resolved. Against this background 
the obviousness or nonobviousncss of the subject matter is determined- Such 
secondary considerations as commercial success, long felt but unsolved needs, 
failure of others, etc, might be utilised to give light to the circumstances 
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surrounding the origin of the subject matter sought to be patented." Quoting 
Graham v. John Deere Co, of Kansas City, 383 IIS. 1 (1 966). 

According to the Examination Guidelines for Determining Obviousness Under 35 U,S,C. 

1 03 in view of KSR International Co. v. Tele/lex Inc., Federal Register, Vol. 72, No* 195 T 57526, 

57529 (October 10, 2007), once the Graham factual inquiries are resolved, there must be a 

determination of whether the claimed invention would have been obvious to one of ordinary skill 

in the art based on any one of the following proper rationales: 

(A) Combining prior art elements according to known methods to yield 
predictable results; (B) Simple substitution of one known element for another to 
obtain predictable results; (C) Use of known technique to improve similar devices 
(methods, or products) in the same way; (D) Applying a known technique to a 
known device (method, or product) ready for improvement to yield predictable 
results; (E) "Obvious to try"— choosing from a finite number of identified, 
predictable solutions, with a reasonable expectation of success; (F) Known work 
in one field of endeavor may prompt variations of it for use in either the same 
field or a different one based on design incentives or other market forces if the 
variations would have been predictable to one of ordinary skill in the art; (G) 
Some teaching, suggestion, or motivation in the prior art that would have led one 
of ordinary skill lo modify the prior art reference or to combine prior art reference 
teachings to arrive at the claimed invention, KSR International Co. v. Tehflex 
Inc., 550 U.S W 82 USPQ2d 1385 (2007). 

Furthermore, as set forth in KSR International Co. v. Teleflex /na, quoting from In re 
Kahn, 441 F. 3d 977, 988 (CA Fed 2006), "[RJqections on obviousness grounds cannot be 
sustained by mere conclusory statements; instead, there must be some articulated reasonings with 
some rational underpinning to support the legal conclusion of obviousness*** 

Furthermore, as set forth in MPEP 2143.03, to ascertain the differences between the prior 
art and the claims at issue, "[a]ll claim limitations must be considered* 1 because "all words in a 
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claim must be considered in judging the patentability of that claim against the prior art." In re 
Wilson, 424 F.2d 1382, 1385. 

If the above-identified criteria and rationales arc not met, then the cited references fail to 
render obvious the claimed invention and, thus, the claimed invention is distinguishable over the 
cited references. 

Independent claims 5 and 1 0 recite features similar to claim 1 described above which arc 
not taught or suggested by Aziz in view of Davis, 

C The_ rejection of claims 6*9 under 35.UJS.C S103fal as being unpatentable over A*\z 
in view of Davis in further view_of Sparks should be reversed because Aziz _in view of Davis 
infurthcrvicw of Sparks fails to teach or suggest all the features of dependent claims fU<)L 

Claim 6 includes features of receiving checkout requests from the wireless 
communication devices at the gateway module and transferring the checkout requests to a wallet 
module that manages user authentication. Claim 6 also recites a user logged into a wallet 
module, transmitting payment options from the wallet module to the wireless devices, and 
transmitting a log-in prompt from the wallet module to the wireless devices. The rejection cites 
Aziz 1 FIG. 3 and Sparks* FIGS. 3, 4, 9, 59, 60; column 2, lines 36-49; and column 17, lines 12- 
26 to teach these Features of claim 6. However, there is no apparent element in this portion of 
Sparks or Aziz that corresponds to the gateway module at which checkout requests are received 
or the claimed wallet module to which the checkout requests arc sent Furthermore, the wallet 
module and its corresponding claimed features described above are not taught or suggested. The 
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cited passage in column 1 7 describes a customer invoice tabic and an order table which does not 
teach or suggest any of the claimed features. The cited passage in column 2 describes a system 
transmitting orders. However, the passage does not disclose these claimed features. 

Claim 8 includes the following features: in response to a payment request from a wireless 
communications device, transmitting the payment request from the gateway module to the 
merchant application, disassociating the wireless session identifier from the corresponding 
merchant session identifier, and generating a new wireless session identifier for the wireless 
communications device when another initial request is received from the wireless 
* communications device, Aziz and Sparks are not shown to suggest these features. The 
Examiner cites Aziz* general teachings of session resumption procedures as corresponding to 
these fcaturess. However, there is no apparent suggestion in either of Aziz or Sparks that any 
disassociation takes place in response to a payment request as claimed 

D. The rejection of claims 1-13 under 35 U.S.C» §lQ3(a) as being unpatentable over 
ftfcuven inview of Davis should be reversed because Nguven in view of Davis_fails_to_teach 
or_su^cst aU_thc.fciirurcs_of independent claims 1« 4»_5»_10_and_ll> 

The rejection of claims 1-13 under 35 U,S,C §1 03(a) is clearly improper because 
Nguyen in view of Davis fails to teach or suggest all the features of independent claims 1 , 4, 5, 
lOandlL 
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Independent claim 1 recites, "associating the first session identifiers with corresponding 
second session identifiers from the application program at the gateway module," Per these claim 
features, the second session identifiers arc from the application program. 

On pages 9-10 of the Final Office Action dated August 31 , 2007, the Examiner clarifies 
the rejection of Nguyen in view of Davis* On page 10, lines 1-7 of the Final Office Action, the 
Examiner relies on figures 20 B and 20C and column 64, lines 36-38 of Nguyen to teach the 
features of claim 1. The Examiner indicates the claimed second session identifiers from the 
application is TID 2005, which is shown in figure 20B of Nguyen, and the claimed first session 
identifier is the XACT REQ 201 0 shown in figure 20C of Nguyen which allegedly uniquely 
represents a transaction request from one of the clients 200, Also, the Exami ner indicates the 
claimed application is the ACA Bank 2004 shown in figure 20C, and the claimed gateway 
module is the VPO 2007 shown in figure 20C 

Regarding the claimed second session identifier which is allegedly taught by the TID 
2005 of Nguyen, Nguyen discloses the POS terminal creates a data structure 2002 for each 
transaction request and sends the data structure to the Bank over a communications link 2003, 
The data structure includes the TID field 2005 which identifies the physical terminal from which 
the transaction originated. See column 65, lines 19-36. Thus, the TiD field 2005, which is 
allegedly the claimed second session identifiers, is generated by the POS and not the bank, which 
is allegedly the claimed application. Hence, Nguyen fails to teach or suggest second session 
identifiers from an application, as claimed in claim 1 . 

20 
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Claim 1 also recites, ''wherein respective connections arc established between the mobile 
communications devices and the application program/* Nguyen tails to teach or suggest 
establishing connection between mobile communications devices and the application program- 
Instead, in Nguyen, the clients 2000 communicate with the VPOS terminal to perform a 
transaction, such as a payment* The VPOS communicates with the bank 2004 on a separate 
connection 2003 shown in figure 20C. The clients 2000 are not attempting to communicate with 
the bank 2004, and there is no connection established between the clients 2000 and the bank 
2004. Instead, the clients 2000 are communicating with the merchant VPOS and not the banks, 
for example, to pay for goods purchased from the merchants. See column 40, lines 43^5. 

Davis was combined with Nguyen to teach a mobile device. Davis fails to remedy the 
deficient teachings of Nguyen. Thus, Nguyen in view of Davis fails to teach or suggest all the 
features of claim L 

Independent claims 4, 5, 10 and 11 recite features similar to the features of claim 1 
described above. Accordingly, Nguyen in view of Davis clearly fails to teach or suggest all the 
features of claims 1-13. 
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(3) Conclusion 

For at least the reasons given above, the rejection of claims 1-13 described above should be 
reversed and these claims allowed. 

Please grant any required extensions of time and charge any fees due in connection with 
this Appeal Briefto deposit account no. 08-2025. 

Respectfully submitted, 



Dated: February 28, 2008 By 



Ashok K_ Marmava 
Registration No.: 45,301 

MANNA VA & KANG, P.C. 
1 1240 Waples Mill Road 
Suite 300 

Fairfax, VA 22030 

(703) 652-3822 

(703) 865-5150 (facsimile) 
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(9) Claim Appendix 

1 , A computer-implemented method for managing respective sessions between mobile 
communication devices and an application program hosted on a data processing system with a 
gateway module that is coupled to the mobile communications devices and to the application 
program, comprising: 

generating at the gateway module respective first session identifiers upon receipt of initial 
requests from the mobile communication devices at the gateway module and transmitting the 
first session identifiers to the application program; 

associating the first session identifiers with corresponding second session identifiers from 
the application program at the gateway module, wherein respective connections arc established 
between the mobile communications devices and the application program and 

in response to subsequent communications from the mobile devices to the application 
program while the respective connections between the mobile devices to the application program 
are established and for communications within the respective sessions, transmitting from the 
gateway module to the application program the second session identifiers that arc associated with 
the first session identifiers of the mobile devices of the subsequent communications, 

2. The method of claim 1, further comprising: 

receiving requests of a first type from the mobile devices at the gateway module and 
transferring the first type requests to an authentication module that manages user authentication; 
and 
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when a user at a mobile device has not loggcd-in to the authentication module, 
transmitting a log-in prompt from the authentication module to the mobile device in response to 
a request of the first type from the mobile device. 

3* The method of claim 2, further comprising generating at the authentication module respective 
authentication identifiers for the first session identifiers and associating the authentication 
identifiers with corresponding first session identifiers. 

4. An apparatus for managing respective sessions between mobile communication devices and 
an application program hosted on a data processing system, comprising: 

means for generating respective first session identifiers upon receipt of initial requests 
from the mobile communication devices and transmitting the first session identifiers to the 
application program; 

means for associating the first session identifiers with corresponding second session 
identifiers from the application program, wherein respective connections arc established between 
the mobile communications devices and the application program and 

means for transmitting the second session identifiers that are associated with the first 
session identifiers of the mobile devices to the application program in response to and in 
association with subsequent communications from the mobile devices directed to the application 
program while the respective connections between the mobile devices to the application program 
are established and for communications within the respective sessions. 
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5. A computer-implemented method for managing respective shopping sessions between 
wireless communication devices and a merchant application with a gateway module that is 
coupled to the mobile communications devices and to the merchant application, comprising: 

generating at the gateway module respective wireless session identifiers upon receipt of 
initial requests from the wireless communication devices at the gateway module and transmitting 
the wireless session identifiers to the merchant application; 

generating at the merchant application respective merchant session identifiers for the 
wireless session identifiers and transmitting the merchant session identifiers to the gateway 
module; 

associating the wireless session identifiers with corresponding merchant session 
identifiers at the gateway module, wherein respective connections are established between the 
mobile communications devices and the merchant application and 

in response to subsequent communications from the mobile devices to the merchant 
application while the respective connections between the mobile devices to the merchant 
application are established and for communications within the respective sessions, transmitting 
from the gateway module to the merchant application the merchant session identifiers that arc 
associated with the wireless session identifiers of the mobile devices of the subsequent 
communications. 
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6. The method of claim S, further comprising: 

receiving checkout requests from the wireless communication devices at the gateway 
module and transferring the checkout requests to a wallet module that manages user 
authentication; 

when a user at a wireless communications device has logged-in to the wallet module, 
transmitting payment options from the wallet module to the wireless communications device in 
response to a checkout request from the wireless communications device; and 

when a user at a wireless communications device has not logged-in to the wallet module, 
transmitting a log-in prompt from the wallet module to the wireless communications device in 
response to a checkout request from the wireless communications device. 

7* The method of claim 6, further comprising generating at the wallet module respective wallet 
session identifiers for the wireless session identifiers and associating the wallet session 
identifiers with corresponding wireless session identifiers in a wallet session identifier table. 

8. The method of claim 7, farther comprising, in response to a payment request from a wireless 
communications device, transmitting the payment request from the gateway module to the 
merchant application, disassociating the wireless session identifier from the corresponding 
merchant session identifier, and generating a new wireless session identifier for the wireless 
communications device when another initial request is received from the wireless 
communications devi ce. 
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9. The method of claim 8, further comprising clearing inactive entries from the wallet session 
identifier table. 

1 0. An apparatus for managing respective shopping sessions between wireless communication 
devices and a merchant application, comprising: 

means for generating respective wireless session identifiers upon receipt of initial 
requests from the wireless communication devices and transmitting the wireless session 
identifiers to the merchant application; 

means for associating the wireless session identifiers with corresponding merchant 
session identifiers received from the merchant application, wherein respective connections are 
established between the mobile communications devices and the merchant application; and 

means for transmitting the merchant session identifiers that arc associated with the 
wireless session identifiers of the wireless devices to the merchant application in response to and 
in association with subsequent communications from the wireless devices directed to the 
merchant application while the respective connections between the mobile devices to the 
merchant application arc established and for communications within the respective sessions* 

1L A system for managing respective sessions between mobile communication devices and an 
application program hosted on a data processing system, comprising: 

a mobile interface configured and arranged to connect with a plurality of mobile 
communication devices; 
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a gateway coupled to the mobile interface and to the application program, the gateway 
configured to generate respective first session identifiers upon receipt of initial requests from the 
mobile communication devices, associate the first session identifiers with corresponding second 
session identifiers received from the application program, wherein respective connections are 
established between the mobile communications devices and the application program, and 
transmit the second session identifiers that are associated with the first session identifiers to the 
application program in response to and associated with subsequent communications from the 
mobile devices to the application program while the respective connections between the mobile 
devices to the application program are established and for communications within the respective 
sessions. 

1 2* The system of claim 1 1 , further comprising an authentication module coupled to the mobile 
interface and to the gateway, the authentication module configured to transmit a log-in prompt to 
a mobile device in response to a request of the first type from the mobile device* 

13, The system of claim 1 2, wherein the authentication module is further configured to generate 
respective authentication identifiers for the first session identifiers and associate the 
authentication identifiers with corresponding first session identifiers. 
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(10) Evidence Appendix 

Attached is a copy of Kocher et ah, "The SSL Protocol Version 3.0" November 18, 
1 996, which is relied on by the Examiner to interpret the teachings of Aziz for the rejection of 
claims 1-3, 4 and 11-13 under 35 US.C §102(e) as being anticipated by Aziz. 
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(11) Related Proceedings Appendix 

None 
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